$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/905c2ded-1a3c-46a2-83ed-82839630ec98.roa File: 905c2ded-1a3c-46a2-83ed-82839630ec98.roa (raw, json) Hash identifier: j3XA3sDWpjmTQFXjdMIygvWWsI9JmMb6TGLSX0D0gzk= Subject key identifier: B8:DE:E3:B4:C9:96:43:3F:2B:D5:08:BF:D1:44:C3:09:30:C4:A4:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68E7C06FF446CFC25BE44C76498A5154F1DCED63 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/905c2ded-1a3c-46a2-83ed-82839630ec98.roa Signing time: Mon 22 Sep 2025 18:29:43 +0000 ROA not before: Mon 22 Sep 2025 18:29:43 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e7:c0:6f:f4:46:cf:c2:5b:e4:4c:76:49:8a:51:54:f1:dc:ed:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:29:43 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e599cff135b9cee672bcba34ff44b813e340333dd9dbb5bb98653a282334d0c2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:82:84:4b:17:18:6c:3d:ec:a9:2a:09:7b: 06:80:bb:98:32:83:6c:14:08:2b:55:5a:aa:d6:a9: 48:cb:18:14:2e:08:3e:b7:fa:e0:6d:5b:cf:13:68: 8f:b0:ad:e0:05:b1:a8:bf:4a:3b:e1:77:52:f6:b5: de:76:1f:f1:9a:42:ed:9c:33:f9:0a:94:40:f4:8c: d1:f5:ac:d1:70:87:f1:df:b0:82:1b:ef:ab:c8:02: 3e:7a:dc:b1:a9:dc:ce:01:54:6c:99:20:7e:00:0f: 09:01:48:62:c6:6b:15:47:dd:9f:1e:b3:70:a4:2c: 10:8d:b2:09:9d:6d:10:a0:bf:65:03:6e:ae:8e:b1: 72:bf:84:a3:13:9c:15:8b:81:07:fe:4c:2a:1d:5c: f1:37:f9:fa:7a:f7:0a:bb:11:b0:71:c9:70:78:19: c8:25:6b:d0:7b:15:95:e7:1b:27:50:19:50:7c:af: f7:dc:48:95:0d:cf:dc:13:c3:0c:77:76:94:f1:23: 95:15:2b:ad:d1:1c:27:c1:52:98:70:65:19:0b:f3: fe:4f:51:a8:fb:b7:7e:48:25:01:c6:8a:38:02:08: 1a:06:21:33:4c:ef:dc:08:e7:7e:43:85:48:fe:84: 69:28:e6:ec:4f:e5:e3:68:c4:bf:2e:a7:78:c7:91: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DE:E3:B4:C9:96:43:3F:2B:D5:08:BF:D1:44:C3:09:30:C4:A4:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/905c2ded-1a3c-46a2-83ed-82839630ec98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.121.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d8:dc:85:b8:c7:5b:1e:a6:90:3b:78:2e:7e:bf:39:f7:86: 2e:16:1d:39:e6:66:72:26:4a:92:dd:8e:90:9a:b1:d2:a7:f2: 33:f8:8f:b8:de:3f:b8:56:ba:15:b5:00:2a:0b:7a:ae:e1:5c: fa:bd:64:fe:83:53:cf:df:40:a9:0b:0f:a9:ad:b1:ce:9a:40: cd:cc:21:38:c2:fe:84:e8:48:a1:65:8a:35:6a:b9:54:ef:23: 0e:d3:15:3d:16:fa:4d:da:d0:27:3a:de:fa:51:28:dc:d1:44: 29:f6:1b:c8:0c:9a:f4:7d:64:12:62:78:69:07:31:5a:7c:03: 0f:93:64:8c:cc:17:70:79:7e:fa:61:47:d9:a2:9c:b8:85:96: 51:ed:75:e6:44:8e:97:19:f9:ac:9c:f5:ed:aa:a9:c1:11:b3: cd:98:cc:83:5c:7c:8b:49:4d:95:42:c0:dd:69:22:0f:0f:e9: 7f:ee:1b:8e:2f:df:74:32:46:e2:f5:0b:65:77:24:64:93:7b: 61:0f:0f:9b:6e:fa:6a:7d:62:98:d5:04:e1:17:e7:f8:0f:fe: b8:f7:cc:af:69:42:9d:d5:1a:7b:52:8b:dc:42:2b:ac:7b:1a: f3:05:9f:55:91:91:93:99:41:88:c4:1e:72:3c:1d:0c:9d:64: 4a:03:25:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaOfAb/RGz8Jb5Ex2SYpRVPHc7WMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyOTQzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTk5Y2ZmMTM1YjljZWU2NzJiY2JhMzRmZjQ0YjgxM2Uz NDAzMzNkZDlkYmI1YmI5ODY1M2EyODIzMzRkMGMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIv4KESxcYbD3sqSoJewaAu5gyg2wUCCtVWqrWqUjLGBQu CD63+uBtW88TaI+wreAFsai/Sjvhd1L2td52H/GaQu2cM/kKlED0jNH1rNFwh/Hf sIIb76vIAj563LGp3M4BVGyZIH4ADwkBSGLGaxVH3Z8es3CkLBCNsgmdbRCgv2UD bq6OsXK/hKMTnBWLgQf+TCodXPE3+fp69wq7EbBxyXB4Gcgla9B7FZXnGydQGVB8 r/fcSJUNz9wTwwx3dpTxI5UVK63RHCfBUphwZRkL8/5PUaj7t35IJQHGijgCCBoG ITNM79wI535DhUj+hGko5uxP5eNoxL8up3jHkdAzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuN7jtMmWQz8r1Qi/0UTDCTDEpNQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwNWMyZGVkLTFhM2MtNDZhMi04M2VkLTgyODM5NjMwZWM5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoXkwDQYJKoZIhvcNAQELBQADggEBAKjY3IW4x1seppA7eC5+vzn3hi4W HTnmZnImSpLdjpCasdKn8jP4j7jeP7hWuhW1ACoLeq7hXPq9ZP6DU8/fQKkLD6mt sc6aQM3MITjC/oToSKFlijVquVTvIw7TFT0W+k3a0Cc63vpRKNzRRCn2G8gMmvR9 ZBJieGkHMVp8Aw+TZIzMF3B5fvphR9minLiFllHtdeZEjpcZ+ayc9e2qqcERs82Y zINcfItJTZVCwN1pIg8P6X/uG44v33QyRuL1C2V3JGSTe2EPD5tu+mp9YpjVBOEX 5/gP/rj3zK9pQp3VGntSi9xCK6x7GvMFn1WRkZOZQYjEHnI8HQydZEoDJZg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:54 2025 by rpki-client